AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2015-10071

LOW · CVSS 2.6 EPSS 0.59% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-19 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2015-10071
Severity
LOW
CVSS
2.6
EPSS
0.59%

Original Filing — NVD Description

A vulnerability was found in gitter-badger ezpublish-modern-legacy. It has been rated as problematic. This issue affects some unknown processing of the file kernel/user/forgotpassword.php. The manipulation leads to weak password recovery. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.0 is able to address this issue. The patch is named 5908d5ee65fec61ce0e321d586530461a210bf2a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218951.